{"data":{"id":"1ee8421f-f499-4128-bd97-9a261f210c91","title":"Beyond End-to-End Recovery: Towards a Better Understanding of LLM Steganography via Rolewise Decomposition","summary":"This research paper proposes a rolewise decomposition framework for evaluating LLM steganography, which hides private messages in ordinary text. Across 7,200 encoder responses, it finds 168 verifiable encodings that decoders missed and 706 responses where messages were recovered through word-length or token-initial patterns not specified in the encoder's instructions. The authors argue that end-to-end recovery alone obscures the distinction between encoding and decoding failures.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.30516v1","publishedAt":"2026-10-21T22:52:40.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"low","attackType":["other"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-21T22:52:40.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","safety"],"aiComponentTargeted":"model","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":"preprint","atlasIds":null}}